$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS203804.roa File: AS203804.roa (raw, json) Hash identifier: Vv+PSJbuSDxil1JqBY/wpY5FLXHjfA1jS0CWHo6VRzA= Subject key identifier: 78:A7:8D:B2:75:AB:6A:8E:33:FF:FF:DF:DD:05:2C:DC:2E:DE:20:3C Certificate issuer: /CN=A917ED5C0000/serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Certificate serial: 50F8AF22F5033BF5A6A2384BED0CBB804FF55EAF Authority key identifier: DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS203804.roa Signing time: Tue 21 Jul 2026 13:32:31 +0000 ROA not before: Tue 21 Jul 2026 13:27:31 +0000 ROA not after: Tue 20 Jul 2027 13:32:31 +0000 asID: 203804 IP address blocks: 2406:840:f230::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 15:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f8:af:22:f5:03:3b:f5:a6:a2:38:4b:ed:0c:bb:80:4f:f5:5e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C0000, serialNumber=DBF6383BA05DBD5108C2D321CD79FE0242E79ADF Validity Not Before: Jul 21 13:27:31 2026 GMT Not After : Jul 20 13:32:31 2027 GMT Subject: CN=78A78DB275AB6A8E33FFFFDFDD052CDC2EDE203C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:79:05:d5:a9:e4:b6:ab:b6:ce:f2:44:b2:82: 11:48:2e:c9:6e:1d:56:9a:5d:c2:e2:9e:c8:00:47: 5a:28:fb:f0:69:1f:d7:7f:f0:36:b7:47:3c:16:58: b7:bc:cc:3f:65:4a:e9:5f:8e:b9:b3:05:cf:00:5a: d8:c4:75:0b:68:d3:1e:02:d2:5d:2c:e6:0a:c7:bb: 40:b5:b4:1d:ef:bb:7c:91:21:f4:75:f2:35:2f:17: 2e:88:34:48:f2:77:0f:7d:8d:10:19:82:fb:04:80: 52:75:a0:1a:fd:f9:38:1b:18:c8:90:c6:42:da:ce: 05:11:cb:ff:f9:0f:ff:6d:06:32:8f:b7:3c:50:b4: f1:e9:58:99:0f:28:0e:de:d7:7c:a9:ad:37:d3:8c: e3:20:5b:e8:e2:28:7f:45:e8:3b:3f:d5:23:fa:31: 3b:fc:be:55:c2:16:f2:d9:35:22:69:f1:45:48:64: d6:22:33:ca:60:a8:ac:9d:24:6a:cf:ef:00:5c:ed: 78:ef:ec:79:ce:f9:82:ed:8d:e9:12:db:a5:50:97: 19:38:d1:53:75:06:da:cc:03:d5:e0:bd:21:6e:28: f9:2f:a6:c1:2a:e2:18:ca:bf:ed:1d:b3:74:a9:ec: e1:71:e8:02:66:00:6e:c5:28:7b:c2:29:14:fb:ec: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A7:8D:B2:75:AB:6A:8E:33:FF:FF:DF:DD:05:2C:DC:2E:DE:20:3C X509v3 Authority Key Identifier: keyid:DB:F6:38:3B:A0:5D:BD:51:08:C2:D3:21:CD:79:FE:02:42:E7:9A:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/AS203804.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:840:f230::/44 Signature Algorithm: sha256WithRSAEncryption 76:76:ef:b7:02:25:f0:38:bd:33:2c:e7:36:ba:28:e5:0d:e2: ab:ba:e9:ee:41:c6:36:03:b0:e5:1f:01:50:a8:a0:c2:e9:b0: 93:8d:a5:3b:b6:5c:ea:8b:25:07:54:d4:4f:23:6d:ce:32:72: 92:5f:6d:5a:88:5f:ae:e3:2e:4f:a2:02:7b:53:d9:0b:93:e2: 16:1c:75:c1:62:41:ad:8f:b9:81:c8:b6:d5:3e:08:37:4a:22: f4:84:c5:6e:f7:de:bc:7d:64:f6:23:a7:7f:06:45:7d:1d:96: db:36:02:00:a3:53:ff:ff:09:5e:38:04:d2:49:c5:d4:34:6e: bd:59:39:5b:d3:78:5a:8c:ab:57:dc:7c:83:c4:36:62:54:b6: 0e:b2:06:91:18:3c:7c:b2:8a:33:b0:05:98:96:ee:17:a6:af: 3d:8f:da:bf:61:56:e6:b2:22:45:73:47:0d:ac:01:94:aa:35: c9:3f:bb:bd:6b:06:36:6f:ab:68:2f:3d:d3:d4:be:dd:68:20: fc:85:d9:ec:8c:57:90:7c:bc:09:27:ec:b5:9f:d6:09:be:54: 7f:56:55:75:48:df:37:b4:e0:3f:e2:b0:79:4f:14:6b:25:03: b5:da:b2:ef:b6:90:c3:f7:f1:44:5c:d3:18:7f:55:ee:72:bd: f7:fc:05:e9 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUUPivIvUDO/WmojhL7Qy7gE/1Xq8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxN0VENUMwMDAwMTEwLwYDVQQFEyhEQkY2MzgzQkEw NURCRDUxMDhDMkQzMjFDRDc5RkUwMjQyRTc5QURGMB4XDTI2MDcyMTEzMjczMVoX DTI3MDcyMDEzMzIzMVowMzExMC8GA1UEAxMoNzhBNzhEQjI3NUFCNkE4RTMzRkZG RkRGREQwNTJDREMyRURFMjAzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMt5BdWp5Larts7yRLKCEUguyW4dVppdwuKeyABHWij78Gkf13/wNrdHPBZY t7zMP2VK6V+OubMFzwBa2MR1C2jTHgLSXSzmCse7QLW0He+7fJEh9HXyNS8XLog0 SPJ3D32NEBmC+wSAUnWgGv35OBsYyJDGQtrOBRHL//kP/20GMo+3PFC08elYmQ8o Dt7XfKmtN9OM4yBb6OIof0XoOz/VI/oxO/y+VcIW8tk1ImnxRUhk1iIzymCorJ0k as/vAFzteO/sec75gu2N6RLbpVCXGTjRU3UG2swD1eC9IW4o+S+mwSriGMq/7R2z dKns4XHoAmYAbsUoe8IpFPvsDhsCAwEAAaOCAicwggIjMB0GA1UdDgQWBBR4p42y datqjjP//9/dBSzcLt4gPDAfBgNVHSMEGDAWgBTb9jg7oF29UQjC0yHNef4CQuea 3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9EQkY2MzgzQkEwNURCRDUxMDhD MkQzMjFDRDc5RkUwMjQyRTc5QURGLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8yX1k0TzZCZHZWRUl3dE1oelhuLUFr TG5tdDguY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2Nm LTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMS9BUzIwMzgwNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQG CEDyMDANBgkqhkiG9w0BAQsFAAOCAQEAdnbvtwIl8Di9MyznNroo5Q3iq7rp7kHG NgOw5R8BUKigwumwk42lO7Zc6oslB1TUTyNtzjJykl9tWohfruMuT6ICe1PZC5Pi Fhx1wWJBrY+5gci21T4IN0oi9ITFbvfevH1k9iOnfwZFfR2W2zYCAKNT//8JXjgE 0knF1DRuvVk5W9N4WoyrV9x8g8Q2YlS2DrIGkRg8fLKKM7AFmJbuF6avPY/av2FW 5rIiRXNHDawBlKo1yT+7vWsGNm+raC8909S+3Wgg/IXZ7IxXkHy8CSfstZ/WCb5U f1ZVdUjfN7TgP+KweU8UayUDtdqy77aQw/fxRFzTGH9V7nK99/wF6Q== -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:53 2026 by rpki-client